Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    URL Filtering with Squid/Squidguard

    Scheduled Pinned Locked Moved pfSense Packages
    5 Posts 3 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jemedia
      last edited by

      Hi. My goal here is to have URL filtering using a downloadable blacklist without any configuration on the client pc's.
      I setup Squid with transparent mode enabled, uploaded a blacklist to Squidguard and set some "deny's" on the "default" page. For the redirect I have "ext url redirect" with the url pointing to an error page I have (using vHosts package actually).
      This seems to be working but I have a couple of questions.
      Firstly, can I get some relevant info on the error page? perhaps the category in the blacklist that the url falls in to?
      Also, I read on the squidguard docs(http://diskatel.narod.ru/sgquick.htm) that if Squid is in transparent mode I'll only be able to use the setting on the default page. Is there any way around this? Can I have Squid not be in transparent mode without having to configure every client to point to the proxy?

      I'm using this setup for lack of a better option, if you know of one, please let me know.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Sorry to hijack your thread but have you managed to get vhosts working in non-ssl mode (http)?
        I have tried and failed. I can only make it work in https. What pfsense version are you running?
        Steve

        1 Reply Last reply Reply Quote 0
        • J
          jemedia
          last edited by

          I didn't really do anything special to get it working, although I did need to reboot the system before the service would start properly. If it helps I'm not using port 80 for the PFsense GUI. I'm using 1.2.3

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Ah, interesting.
            Still not working for me though.  ???
            See my thread here.

            Steve

            1 Reply Last reply Reply Quote 0
            • D
              dvserg
              last edited by

              2 jemedia
              You can test ACL work in transparent mode
              I'm not sure what this situation correct writen in docs(http://diskatel.narod.ru/sgquick.htm), because don't has full testing.

              What you can do for test ACL in transparent mode:
              Set Default_All to deny on Default page
              Add ACL with you subnet and set Default_All ad allow
              APPLY and Browse from you workstation.

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.